Code execution risk analysis of PythonAstREPLTool in the archived langchain-experimental package
AI summary
In the archived Python package langchain-experimental, the PythonAstREPLTool component has weak filtering of large language model output content and directly executes input using exec/eval, posing a code execution risk. The component is no longer maintained; combined with platform assessment and latest download data, its security risk still exists at this stage, and the article provides corresponding remediation suggestions.